Hi Igor, <And you are sure the keystore loads properly?
I don't know how to test if the keystore loads properly if that is what you are asking. <Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol" maxThreads="200" SSLEnabled="true" scheme="https" secure="true" keystoreFile="/your/domain.keystore" keystorePass="your_passwd" clientAuth="false" sslProtocol="TLS" /> <Are those values for keystoreFile and keystorePass correct? Do you see any errors in catalina.out log? Those aren't the actual values, I had changed them as I had sent it to a colleague who had access to the system. Actual values are as follows; <Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol" maxThreads="200" SSLEnabled="true" scheme="https" secure="true" keystoreFile="/home/bageoconsultants.keystore" keystorePass="bageo7871" clientAuth="false" sslProtocol="TLS" /> I am too new at Linux to know if the output from this is bad, other than the first line. Not really sure what the rest is telling me. [ec2-user@ip-172-31-52-159 logs]$ tail -f catalina.out java.lang.IllegalArgumentException: Invalid character found in method name. HTTP method names must be tokens at org.apache.coyote.http11.InternalInputBuffer.parseRequestLine(InternalInputBuffer.java:136) at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1000) at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:637) at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:316) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) at java.lang.Thread.run(Thread.java:745) Thanks, --George -----Original Message----- From: Igor Cicimov [mailto:icici...@gmail.com] Sent: Wednesday, November 16, 2016 8:48 PM To: Tomcat Users List <users@tomcat.apache.org> Subject: Re: SSL on Tomcat7 on AWS not connecting On 17 Nov 2016 4:38 am, "George Chanady" <gchan...@webhse.com> wrote: > > I hope someone can help.I have exhausted all my troubleshooting skills and all of my newbie Linux knowledge and I am at the end of my rope. > > All documentation from around the web always seem to tell me to try everything I have already tried. I am sure that there must be a caveat that I am missing. > > I have an AWS Linux instance with Tomcat 7.0.73 and cannot for the > life of me get the SSL working. > > I set up the AWS instance with nothing else on the server and using a fresh installation of Tomcat with basic config settings. I am able to connect http://mysite.com:8080 but cannot connect with https://mysite.com:8443. > I am able to SSH as that is the only way I communicate with the server. > > I only have forwarders for port 80 and 443 in the iptables and nothing else and have security groups in AWS setup to allow all traffic from everywhere for ports 80, 8080, 443, and 8443. > > I have ensured the ports needed are open and listening using netstat I > have checked to ensure connectivity to the ports from other machines using netcat > I checked that the certs were installed properly and that the tomcat connectors were pointed the proper location > > I am attaching my configuration from start to where I hit the wall. > > Thanks in advance for any assistance. > And you are sure the keystore loads properly? <Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol" maxThreads="200" SSLEnabled="true" scheme="https" secure="true" keystoreFile="/your/domain.keystore" keystorePass="your_passwd" clientAuth="false" sslProtocol="TLS" /> Are those values for keystoreFile and keystorePass correct? Do you see any errors in catalina.out log? --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org